---
id: CVE-2025-38706
title: 'ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()

  snd_soc_remove_pcm_runtime() might be called with rtd == NULL which will
  leads to null pointer derefe…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 <
    8b465bedc2b417fd27c1d1ab7122882b4b60b1a0
  - >-
    Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 <
    82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94
  - >-
    Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 <
    7f8fc03712194fd4e2df28af7f7f7a38205934ef
  - >-
    Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 <
    41f53afe53a57a7c50323f99424b598190acf192
  - >-
    Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 <
    2fce20decc6a83f16dd73744150c4e7ea6c97c21
  - >-
    Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 <
    cecc65827ef3df9754e097582d89569139e6cd1e
  - >-
    Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 <
    7ce0a7255ce97ed7c54afae83fdbce712a1f0c9e
  - >-
    Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 <
    2d91cb261cac6d885954b8f5da28b5c176c18131
  - Linux 5.6
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:07:47.507300Z'
published: '2025-09-04'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:12:53.938Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38706'
references:
  - url: 'https://git.kernel.org/stable/c/8b465bedc2b417fd27c1d1ab7122882b4b60b1a0'
  - url: 'https://git.kernel.org/stable/c/82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94'
  - url: 'https://git.kernel.org/stable/c/7f8fc03712194fd4e2df28af7f7f7a38205934ef'
  - url: 'https://git.kernel.org/stable/c/41f53afe53a57a7c50323f99424b598190acf192'
  - url: 'https://git.kernel.org/stable/c/2fce20decc6a83f16dd73744150c4e7ea6c97c21'
  - url: 'https://git.kernel.org/stable/c/cecc65827ef3df9754e097582d89569139e6cd1e'
  - url: 'https://git.kernel.org/stable/c/7ce0a7255ce97ed7c54afae83fdbce712a1f0c9e'
  - url: 'https://git.kernel.org/stable/c/2d91cb261cac6d885954b8f5da28b5c176c18131'
tags:
  - cve.org
epss: 0.00204
epssPercentile: 0.10453
ingestedAt: '2026-11-05T22:38:32.015Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()

snd_soc_remove_pcm_runtime() might be called with rtd == NULL which will
leads to null pointer dereference.
This was reproduced with topology loading and marking a link as ignore
due to missing hardware component on the system.
On module removal the soc_tplg_remove_link() would call
snd_soc_remove_pcm_runtime() with rtd == NULL since the link was ignored,
no runtime was created.

## Affected

- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 8b465bedc2b417fd27c1d1ab7122882b4b60b1a0`
- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94`
- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 7f8fc03712194fd4e2df28af7f7f7a38205934ef`
- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 41f53afe53a57a7c50323f99424b598190acf192`
- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 2fce20decc6a83f16dd73744150c4e7ea6c97c21`
- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < cecc65827ef3df9754e097582d89569139e6cd1e`
- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 7ce0a7255ce97ed7c54afae83fdbce712a1f0c9e`
- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 2d91cb261cac6d885954b8f5da28b5c176c18131`
- `Linux 5.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.